Same here, Broken on 6.8.0-139-generic Works on 6.8.0-138-generic Framework 13 with AMD 7640U
Sep 06 19:10:48 kernel: Bluetooth: hci0: HW/SW Version: 0x008a008a, Build Time: 20250523103438 Sep 06 19:10:48 kernel: BUG: kernel NULL pointer dereference, address: 0000000000000219 Sep 06 19:10:48 kernel: #PF: supervisor read access in kernel mode Sep 06 19:10:48 kernel: #PF: error_code(0x0000) - not-present page Sep 06 19:10:48 kernel: PGD 0 P4D 0 Sep 06 19:10:48 kernel: Oops: 0000 [#1] PREEMPT SMP NOPTI Sep 06 19:10:48 kernel: CPU: 1 PID: 142 Comm: kworker/u25:0 Tainted: G OE 6.8.0-139-generic #139-Ubuntu Sep 06 19:10:48 kernel: Hardware name: Framework Laptop 13 (AMD Ryzen 7040Series)/FRANMDCP05, BIOS 03.20 06/23/2026 Sep 06 19:10:48 kernel: Workqueue: hci0 hci_power_on [bluetooth] Sep 06 19:10:48 kernel: RIP: 0010:__pm_runtime_resume+0x1b/0x80 Sep 06 19:10:48 kernel: Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 55 48 89 e5 41 56 41 55 41 54 41 89 f4 83 e6 01 53 48 89 fb 75 09 <f6> 87 c9 01 00 00 04 74 4a 41 f6 c4 04 74 07 f0 ff 83 c0 01 00 00 Sep 06 19:10:48 kernel: RSP: 0018:ffffcb8a40533b30 EFLAGS: 00010246 Sep 06 19:10:48 kernel: RAX: ffff8b677c1ff4d0 RBX: 0000000000000050 RCX: 0000000000000000 Sep 06 19:10:48 kernel: RDX: 0000000000000035 RSI: 0000000000000000 RDI: 0000000000000050 Sep 06 19:10:48 kernel: RBP: ffffcb8a40533b50 R08: 0000000000000000 R09: 0000000000000000 Sep 06 19:10:48 kernel: R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 Sep 06 19:10:48 kernel: R13: 0000000000000035 R14: 000000000000003a R15: ffffcb8a40533be8 Sep 06 19:10:48 kernel: FS: 0000000000000000(0000) GS:ffff8b7dffc80000(0000) knlGS:0000000000000000 Sep 06 19:10:48 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Sep 06 19:10:48 kernel: CR2: 0000000000000219 CR3: 000000010872e000 CR4: 0000000000f50ef0 Sep 06 19:10:48 kernel: PKRU: 55555554 Sep 06 19:10:48 kernel: Call Trace: Sep 06 19:10:48 kernel: <TASK> Sep 06 19:10:48 kernel: usb_autopm_get_interface+0x1d/0x60 Sep 06 19:10:48 kernel: btmtk_usb_hci_wmt_sync+0xa9/0x2e0 [btmtk] Sep 06 19:10:48 kernel: ? __pfx_btmtk_usb_hci_wmt_sync+0x10/0x10 [btmtk] Sep 06 19:10:48 kernel: btmtk_setup_firmware_79xx+0x1c7/0x360 [btmtk] Sep 06 19:10:48 kernel: btusb_mtk_setup+0x453/0x610 [btusb] Sep 06 19:10:48 kernel: hci_dev_setup_sync+0x6c/0x430 [bluetooth] Sep 06 19:10:48 kernel: ? __pm_runtime_idle+0x4c/0xd0 Sep 06 19:10:48 kernel: hci_dev_init_sync+0x3e/0x1c0 [bluetooth] Sep 06 19:10:48 kernel: hci_dev_open_sync+0xb1/0x350 [bluetooth] Sep 06 19:10:48 kernel: ? srso_alias_return_thunk+0x5/0xfbef5 Sep 06 19:10:48 kernel: hci_dev_do_open+0x28/0x70 [bluetooth] Sep 06 19:10:48 kernel: hci_power_on+0x50/0x210 [bluetooth] Sep 06 19:10:48 kernel: ? srso_alias_return_thunk+0x5/0xfbef5 Sep 06 19:10:48 kernel: ? __try_to_del_timer_sync+0x5f/0xa0 Sep 06 19:10:48 kernel: process_one_work+0x181/0x3a0 Sep 06 19:10:48 kernel: worker_thread+0x18b/0x330 Sep 06 19:10:48 kernel: ? __pfx_worker_thread+0x10/0x10 Sep 06 19:10:48 kernel: kthread+0xef/0x120 Sep 06 19:10:48 kernel: ? __pfx_kthread+0x10/0x10 Sep 06 19:10:48 kernel: ret_from_fork+0x44/0x70 Sep 06 19:10:48 kernel: ? __pfx_kthread+0x10/0x10 Sep 06 19:10:48 kernel: ret_from_fork_asm+0x1b/0x30 Sep 06 19:10:48 kernel: </TASK> Sep 06 19:10:48 kernel: Modules linked in: ac97_bus snd_intel_dspcfg btusb snd_pcm_dmaengine snd_intel_sdw_acpi btrtl btintel mt7921e(+) btbcm snd_hda_codec snd_pci_ps mt7921_common snd_hda_core btmtk snd_hwdep edac_mce_amd snd_rpl_pci_acp6x mt792x_lib snd_acp_pci amdxcp snd_seq_midi mt76_connac_lib snd_acp_legacy_common bluetooth uvcvideo kvm_amd drm_exec snd_seq_midi_event videobuf2_vmalloc snd_pci_acp6x mt76 gpu_sched cros_ec_lpcs uvc ecdh_generic videobuf2_memops cros_ec drm_buddy ecc snd_pcm snd_rawmidi drm_suballoc_helper videobuf2_v4l2 kvm drm_ttm_helper mac80211 hid_sensor_als snd_pci_acp5x videodev hid_sensor_trigger ttm industrialio_triggered_buffer snd_seq kfifo_buf videobuf2_common drm_display_helper snd_rn_pci_acp3x hid_sensor_iio_common irqbypass mc amd_pmf(+) snd_acp_config snd_seq_device rapl wmi_bmof industrialio snd_timer snd_soc_acpi amdtee cec cfg80211 k10temp snd snd_pci_acp3x i2c_piix4 rc_core soundcore libarc4 ccp i2c_algo_bit amd_sfh tee platform_profile amd_pmc joydev input_leds mac_hid serio_raw Sep 06 19:10:48 kernel: sch_fq_codel msr evdi(OE) parport_pc ppdev lp parport efi_pstore nfnetlink dmi_sysfs ip_tables x_tables autofs4 btrfs blake2b_generic xor raid6_pq libcrc32c dm_crypt dm_mirror dm_region_hash dm_log uas usb_storage usbhid crct10dif_pclmul crc32_pclmul ucsi_acpi polyval_clmulni typec_ucsi hid_sensor_hub polyval_generic nvme ghash_clmulni_intel hid_multitouch hid_generic sha256_ssse3 thunderbolt sha1_ssse3 nvme_core xhci_pci typec i2c_hid_acpi xhci_pci_renesas nvme_auth video i2c_hid wmi hid aesni_intel crypto_simd cryptd Sep 06 19:10:48 kernel: CR2: 0000000000000219 Sep 06 19:10:48 kernel: ---[ end trace 0000000000000000 ]--- -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2166577 Title: Bluetooth NULL pointer dereference in btmtk_usb_hci_wmt_sync on MT7925 (6.8.0-139, regression from 138) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2166577/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
